Network Messaging Vulnerability in Linux Kernel Affecting DLM Functionality

CVE-2026-74401

What is CVE-2026-74401?

In the Linux Kernel, a flaw within the Distributed Lock Manager (DLM) can cause issues with message handling in network communication. This arises when sequence number ordering of messages is incorrect during high-load scenarios, potentially leading to refcounting errors and use-after-free vulnerabilities. This issue was predominantly observed in experimental DLM branches and specific user space benchmarks utilizing io_uring. Fixing this ordering ensures greater stability and integrity in message processing within DLM.

References